Research Academy
My account Customers About Blog Careers Legal Contact Resellers

Burp Suite User Forum

Login to post

Lab: SQL injection with filter bypass via XML encoding in Python

El0i | Last updated: Aug 14, 2023 04:22PM UTC

Hi, I am currently doing Lab: SQL injection with filter bypass via XML encoding (https://portswigger.net/web-security/sql-injection/lab-sql-injection-with-filter-bypass-via-xml-encoding) and I am struggling to solve this only via python and not use Hackvertor like showed in the course. Does anybody have any idea how we could encode XML to bypass blacklisted words only via python and not use Hackvertor please? Thank you

Hannah, PortSwigger Agent | Last updated: Aug 15, 2023 11:01AM UTC

Hi Are you trying to solve the lab without using Burp at all? I found the following Python library that might be useful for you, assuming you are using a separate tooling - https://wiki.python.org/moin/EscapingXml

You need to Log in to post a reply. Or register here, for free.